fabioc-aloha/Alex_Skill_Mall - 8페이지

critical-thinking

Challenge what you think is right — alternative hypotheses, missing data, evidence quality, bias detection, falsifiability, and adversarial review

원문 언어: 영어

debugging-patterns

Systematic problem-solving and error analysis.

원문 언어: 영어

dialog-engineering

CSAR Loop and structured conversation patterns for effective AI dialog -- Clarify, Summarize, Act, Reflect

원문 언어: 영어

hypothesis-driven-debugging

Investigate build failures, test errors, runtime crashes, or unexpected behavior through systematic minimal reproduction, multi-hypothesis testing, and evidence-based verification. Use when asked to "debug", "investigate a failure", "find root cause",…

원문 언어: 영어

knowledge-synthesis

Cross-project pattern recognition — abstract, generalize, connect, store at the highest true level

원문 언어: 영어

problem-framing-audit

Step-back protocol — restate, generalise, specialise, invert, ask why, pre-mortem, check stakeholders, and audit framings before solving

원문 언어: 영어

root-cause-analysis

Find the true source, not symptoms — systematic debugging from observation to permanent fix

원문 언어: 영어

rubber-duck-debugging

Be a thinking partner. The answer often emerges when explaining the problem.

원문 언어: 영어

socratic-questioning

Help users discover answers, don't just deliver them.

원문 언어: 영어

allowlist-over-blocklist

Validate input against an allowlist of permitted values — reject everything else

원문 언어: 영어

api-security-hardening

API security hardening — rate limiting, JWT validation, CORS, input validation (4-layer defense)

원문 언어: 영어

assist-sg-update

Generate assisted PRs to correct Security Group ownership for first-party apps flagged by S360 tenant-isolation policy (SFI-TI3.2.2)

원문 언어: 영어

build-fix

Fix compile-time and build errors introduced by prior agent changes

원문 언어: 영어

create-associate-nsg

Creates a new Network Security Group and associates it with the specified subnets and/or NICs of a Virtual Network.

원문 언어: 영어

distribution-security

Defense-in-depth, PII protection, secrets scanning, and secure packaging for distributed software

원문 언어: 영어

error-message-sanitization

Raw error messages leak internal information to users:

원문 언어: 영어

fetch-violations

Query S360 Kusto for SFI-TI3.2.2 tenant isolation violations, classify by ViolationTitle, flag autofix-eligible items for downstream remediation

원문 언어: 영어

generate-report

Generate an interactive, self-contained HTML dashboard displaying SFI-TI3.2.2 tenant isolation violations for a service, org, or alias -- includes filtering, sorting, severity coding, TSG links, S360 deep links.

원문 언어: 영어

guide-advanced-remediation

Complex multi-step remediation scenarios for S360 Tenant Isolation violations that require code changes, Federated Identity Credential (FIC) setup, and bilateral coordination between service teams.

원문 언어: 영어

guide-cert-rehoming

End-to-end process of rehoming (moving or reissuing) certificates so every production Entra app credential lives in the same tenant and cloud as the app itself.

원문 언어: 영어

input

Extract and resolve required CodeQL alert metadata from user input before remediation

원문 언어: 영어

lookup-nsg-for-vnet

Checks every subnet in a Virtual Network for an associated Network Security Group, and also inspects each NIC attached to those subnets for NIC-level NSG coverage.

원문 언어: 영어

lookup-nsg

Finds the Network Interface Card (NIC) and associated Network Security Group (NSG) for a VM given its public IP address.

원문 언어: 영어

markdown-sanitization-chain

Markdown sanitization order matters — marked.js then DOMPurify then Mermaid to prevent XSS

원문 언어: 영어

nnf-cve-cleanup

Cleans up NNF deployments impacted by vulnerable or outdated container images using guided execution.

원문 언어: 영어

output

Produce the final CodeQL fix result table and choose the correct exit code and retry behavior

원문 언어: 영어

path-traversal-prevention

When copying files or serving content, user-controlled paths can escape the intended directory:

원문 언어: 영어

pii-privacy-regulations

Handling personally identifiable information under European and Australian privacy regulations.

원문 언어: 영어

privacy-responsible-ai

Privacy by design, data protection, and responsible AI principles.

원문 언어: 영어

remediate-nsg

Applies M365NetIsoNsg compliance rules to an existing Azure NSG and outputs the ARM template for Safe Deployment.

원문 언어: 영어

remediate-pfx-certificates

Skill helps user to remove checked-in certificates from source code in case of exposed secrets

원문 언어: 영어

revoke-and-rotate-certificate

Skill helps user to revoke and rotate certificate in case of exposed secrets

원문 언어: 영어

secrets-management

Secure token storage, VS Code SecretStorage API, credential management, environment variable migration

원문 언어: 영어

security-review

Defend before attackers find the gaps - OWASP, STRIDE, and Microsoft SFI

원문 언어: 영어

security-threat-modeler

Analyze codebase architecture to generate a STRIDE-based threat model with data flow diagrams, trust boundaries, prioritized threats, and mitigations. Compatible with Microsoft Threat Modeling Tool concepts. Use when asked to "threat model", "security…

원문 언어: 영어

shell-injection-prevention

Use execFileSync with args array instead of execSync with string concatenation to prevent shell injection

원문 언어: 영어

symfix

Classify and remediate CodeQL alerts with the SymFix workflow using staged changelog updates

원문 언어: 영어

threat-surface-analysis

Discover a codebase's threat surface through systematic investigation — map ecosystem groups, dependency graphs, service connections, authentication mechanisms, and trust boundaries. Use when performing threat modeling, security review, or architectural…

원문 언어: 영어

violation-triager

Orchestrate end-to-end SFI-TI3.2.2 workflow — fetch violations, classify, dispatch to remediation skills, generate report

원문 언어: 영어

coherence-audit

Detect coherence violations between Alex_ACT_Edition (brain) and Alex_Skill_Mall (marketplace) — broken references, tag mismatches, deprecated install snippets

원문 언어: 영어